Session auth (15/16)

Session auth