add sessions and login/logout