update session authentication