[MH/LF] [48508189] Add session management

- set the session on login
- check the session on request