check for session id instead