wip: add users and session management