session gets set properly in setup()