removed the session validation and placed it on an inc
placed session validation on an inc folder