added user/session staff to our system
supported basic authentification