set session._next on login