adding session dao to manage login/logout flow