OAuth2 #58: Session variables well set ...