fix(auth): Allow multiple sessions per user