why are you passing the $session here?