using sessions to auththenticate
checking for user login
logout user