add session validation and fix links
add to custom.css and refactor