session has already been started by session.auto-start or session_start()