add simple user session, refactor session objects