add isAuthenticated helper and token in session