auth support and improved session