add user session authentication
add user session authentication