audit: use session_info helper