adding session lock