<?php

function login(User $user)
{
    // argh! (note that a static registry/locator isn't any better)
    global $sessions;
    
    $session = new Session($user);
        
    $sessions->add($session);
        
    return $session;
}

// usage:

$session = login($user);