Auth now works with session ID's