admin can login and logut

used session
Merge branch 'login'