set session when logged in