update http session manager (still under progress)