db credentials
missing session