backend login and diff session between backend and frontend. introduce how to use session and cookie. path alias info like system, application, webroot, zii and so on