move session init into utils, re-fetch session after login