massive update - new user permissions model and session organization