fix login session bug