added login and sessions