login changes

Login works, adding session check