can now create sessions through cookies and am pushing to authenticate users through the login page