session data store from a client, change auth method and get session info via api