Session auth (4/16)

Session auth