Session auth (7/16)

Session auth