Add session managements function req.login and req.logout