changes to session in login