fixed create login_session procedure for redirect to user_url