login and session works now