add login session data
modify admin page
remove useless session_start