Adding session dependency to handler

This is necessary to support session-based authorization