got login working to pull user

need to set up sessions to control when user is logged in