added login session management