fix generate/destroy session, add loggedIN/user to rootscope