generated session service
improved header; generated login route
added pseudo authorization