modify session code to help gussable session attack and add CreateAd link