autentification over session_id