add sessionCheck at login flow