fix sessions and login.
app config.