sessions and login complete