session has SID stored