only keeping users logged in for 1 day