Session authentication on user resource implemented. Post on list works only authenticated right now. Deal with that later.