add login and session tracking