list active accounts
make sure username and password in NewSession have at least 1 character