added login and session tracking
fixed session remove