added login & session logic to app