login_success and session handling added to login