added user session authentication to candidate and serverprocessing