Session auth (13/16)

Session auth