set up user authentication and logins with sessions