serve static files
introduce sessions