add sessions, login, logout, and authorization