added session disposing when login failed