added session management and permission controll to personalStats page