adding auth
added sessions to login