removing session scoped for now
trying to use an safesession