make sure the person is using a valid sesion