- prepared having user info in session