remove the old auth and correct some wording
use the session service