stored logged in user in session