add error for login, make sessions new the root
fixed error message