initial work on login page with session