implement "NO_SESSION" option to avoid saving session cookies
pass tests
logging in should reload everytime the user (no session)