added: session initialization and more-secure login