Authorization for workout_sessions depending upon plan