add session and user