update the user login system, remove the ticket, update the session mechanism