changed the login controller

now the session will also store the userid