working through oath authentication for creation sessions