put Session into oauth2 constructor