add session api for anonymous flagging