working on login and restrictions
work on restrictions, session userdata