added necessary call to session_start()