fixed a bug in finding sessions by month

should use login times, because users might not have logout times