Set session properly in zhdk-auth-contr.; consolidate set_session