Session auth (9/16)

Session auth