include user's fullName when validating a session. also, allow cookie session to be used if not passed in directly as a parameter
include user's fullName when validating a session. also, allow cookie session to be used if not passed in directly as a parameter