add logged-in-user session access