finish session validation
add user edit & update profile logic