add login session verify and use jackson instead of json-lib