centralized constants on a external module, more sessionManager refactoring
cipher user header as well