finish session/persistant login