Collapse API calls related to login in one

- Request session to be created with auth
- Request auth to be initialized with tokens
- Read session/user info out of the created auth