set up sessions for users