create user, session
login authentication is working