basic login functionality
fixing sessions