Authorizing user's access and Authenticating user's session