session and signin improvements