added auth button
add sessions and auth middleware