refactoring
bugfix client auth by session