rewrite Authentication & Session
rewrite Authentication & Session