[fix bug 835781] Implement session based authorization.