Fixed session error and added password masking

I was getting an error on the page as the session name was wrong (USER
instead of SESSION_USER). Fixed.