Move more auth helpers into session module