verifying session …