Refactor SessionResponse as AuthenticationResponse