add some users for testing
rewrite session using new api