updating to handle session users