signing in and up based on session variables now