added use of PHP's session management