change get => post and remove session => set session null