add sessions, login/out, cookies