login and sessions implemented