login works, still not tracking the sessionid though