fix bug always show login(set session in login page)