user session key (bug fixed)