playing with sessions
sign in/out, like mhartl
implement sign in the other way