fix session login bug