add simple user authentication whit session