move log initialization up so we can use it
store session on getSession; add getSessionRoles