but how to formally represent the session user and session r