session: session2bearer return "" instead NULL