And I know we can create new sessions after validating user inputs during login using

Session.createNewSession(res, <userID from database>);