login and session control seem to be working. Should check if the sessions are implemented correctly tho