session login fixed