more SQL/joins; sessions and cookies