Added login logic.
Added session handling to express