commented out session code in webconfig