add sign-in sign-out, session functionality