Auth and deauth changed to allow for session checks.