working sessions with redirect