Session auth (8/16)

Session auth