updated to refer to session model for auth