add sessions (login and logout initial backend)