add session attribute for success login