registration&login w/session updates user info