adds session token
adds signin ability