Session auth (11/16)

Session auth