fix login and add session