added option to skip password verification when creating sessions