merge session to auth, fix login due to new model ids