add session info on multifactor