use Session to realize login and logout fuction