add login autorization
sessions, actives and passives