sign up and log in using session