session authorization complete