generate a new session of every login
add logout