authentication methods and session messages