correct sessions location in header