added user login control with session