sessions are complete as far as security is concerned. Need to replace the current_user variable. Also Logout exists as well