added a authentication for session