http session injected in session method