set loggedIn into session if auth'd and delete if not auth'd