Simple login working, logged-in state not remembered in Session yet