add auth/session pkg