changes: session handling, login, h2 database in backround