proper redirection, session life cycle