when user signs up, session persists