Well basically it does:

1. Checks to see if the user details are ok
2. Starts A Session with session hash( not just the session id, but a mix of a lot of things), a password hash (for checking each time isRegistered() is called), and an expires time
3. Then it adds the session infomation to the database

I then have a isRegistered() function that checks all the information against database et.