add user into session