add user sessions

Uses the global $_SESSION variable to manage user logins