the user now stays logged in on page refresh