add session for user log in/out