included headers w and without session everywhere needed. all is tested and working