create session
logout & session delete