SessionManager

login returns hascode, only add stored procedure and it's secure.