fix session scopes
fix model guard in session unauthorized_record
fix tests
update .gitignore