loginsession implemented + input validation