Session auth (2/16)

Session auth