add session to track user