added session key to Auth.pm

session key is now a valid authorization method