User auth & session vars implemented