remove application authentication filter
add headers to session auth
fix session: remove session_reset and add session authentication delete