login is working, session variables still not working