add a global session struct for tracking user