Add session authentication