added session manager and security for user login