First authentication with session