adding user session management