add session package
maintain user login status