add session controller
login
login and logout improved