- session check enabled
- request2(), fixed session checking