fixed user password and added session resources