login + session management improved