Global session and authorization mechanism