lot of stuff
adding session and user login