mod main.html mod response.authResponse to response.session