fix session/login