add support for auth sessions
header button are hidden until signed in