reworking a cleaner path for authenticated sessions this year