added authenticate to session create