app login&logout; storing session data;