move most session login to StSession, began store logic