added session model object and login manager to deal with auth