Fixed sessions and login, reading current user, most authorization stuff