Authorize some routes, added some session helpers