Session(oldusername)= and Session(oldauth) =