Add simple session based authentication