test session and authentication