implemented user login - MISSING SESSION