login logout done. session not working:(