added instructions on how to setup the application
creating a session hash for username and password