login & session stuff implemented
missing files