added authentication for user login sessions