Update session on authenticate