Added basic client side authentication and also secured /api/sessions/add