change the authentication with session