add session-check by rule group