• initializing
• session

request

protection

verify loading request