add session verify for each servlet for safety reason