added session and login