2. You mean after any *auth* request (BaseClient(url=, username=, password=), right?
3. Are you thinking about addign otp to session_id?