checkAuth function updated in bxSession to recursively check object