fix routes for sessions
fix current user and role