user auth session bug fixed