milestone 35 and 36: session variables