added session for login so username is global