new session key added for authorization and authentication