getting session from request