request can use session