session management across front and back end