session set attributes in sessionCreated method