Add auth session. Change routes. Add POST/PURGE (login/logout)  request methods