added basic session functionality so users can log in