add user session, no need to re-login within a short time