checkpoint 2

login with session