Session auth (10/16)

Session auth