changed link to https and session checking for user login