(Insecure Session) Setup sessions properly, clear them on login and logout, and don't use the user as the id