manager login session on all request