Set session cookie on auth.
Use tagged fields in composite literal.