session authenticate fix