login form implemented with session userdata