adding user password and login with sessions.