session create typo
prevent logged in user from creating new account