Add NOTE for session module.
Add authentication decorator, and add login_required to some handlers