login/logout sessions now working