save login_session per session since we're multi-login
add user_session_set() user_session_get() user_session_remove()
restructure login to use user sessions saved in registry