adds login and logout methods to Session class
changes User::pw_check to non static method