modified:   auth

Auth can now take a session to authenticate