4th Commit

User can only login if they have session.