Use updated import syntax and add simple-auth/session

fixes #1, fixes #2