added session key as valid auth