updated sessions + login