watch out for null in case session over