- reused existing session if still valid