leftover references (how?) to context
session attribute also needs to be cleared every request