login added, need to set session