collect sessions/authentications as json events