add more logic to remove access session