fix(auth): change logic

send a POST req with query params to create a session;  store accessToken in a global vars

time: 1h:10