fix login/logout session