users login, session variable and post blog