logging in works, need to create unique sessions