authN already sets the session pidm