pageload authentication using session veriable