added new authentication system using session