fixed user log in session path