user sessions almost perfect, not quite