statrted implementing session authentication