session is now injected