verifying session...