user session auth fix

Same here