save user credential in session