added login form and associated javascript, used sessions in user_login script