use session in handler