full session based authentication example integrated