added logins and sessions

i should really hide these keys in a .gitignored file