login status render now works
session is reset on authentication to prevent session fixation