fixed session login