add session logic to user signup