some new login script with sessions