added user session management