add session managment,user role