some auth session fixes