return session id on login