Pushing changes to the auth class to default session security to true by default, this will only affect method calls where the second parameter is not specified.