fix session auth interceptor