Implement user session creation and destroy