working on session part of logging in