save username and userid in session