working sign in and sign out and sessions