added session and user management