Session auth (6/16)

Session auth