updated routes for login/logout, added user sessions