login: add to session
add :base controller for admin