introduce session service for keeping track of authenticated user