used session so that we stay logged in