set nonexistant session hash on login