session still not work, maybe it's because seeOther is used to redirect user to userlist page after login.