var session = null;