created session
changed the return value of the login function