login things changed to sessionscoped bean