add session regenerate after login / logout