finish rough sessions cookies and auth