add login validate
change session user