Fix redis sessions ; add auth and auth policies