sessions restrict