add sessionkey to protect 2fa logins
add session context for 2FA
bump manifest
merge session with master