keeping track of users session when logged in