made session method private
A logged in user sees only their own bookmarks