final fixes to login session