complete Session authorization (from scratch)