session testing added to the login feature