Session auth (3/16)

Session auth