added session to login route