unable to display session variables in a non-auth application