Change in behavior: add SetAuth service object model instead of AddAult (removed).
New feature: add :create action to the SessionsController.