session handling in all pages