backend with statuscodes for users and sessions