switch to pylons for session handling
disable modification of user data in ui