added user session check