session attributes fixed