enabled user authentication using sessions