session issues for login/logou