Allow authMode = admin to override session auth