get_session now returns nil if login not successful