attribute checking in the session REJECT