fixed login session for user