update : session, redirect