starting login, session tracking for user