video 49: using sessions to authenticate users