user session auth fix

no need for this