implement session object and allow one user to login and logout