Set session on login
Add Sessions#destroy to log users out