as close as I could get, kind of stays logged in but need to be able to send session through header; still working on that