Basic auth working. Need Session management