complete user authentication process, setting session