simplify shv_session_auth_filter()
split auth to _basic and _session