image route
return sessionid when auto login