wait why would I manage sessions though, the log in provider is already doing that