got user login and session working