bug fix initializes session and creates user