fix checking session user id