user management : register, login, logout and session
items are now attached to user