made session not private