fixed sessions
fixed login/logout