add global session
user auth