fix addAuth to tell mognoose auth is updated by markModified.
fix session.loggedIn handling and implement merge feature.