devTeam: add session management, authorization for customers, staff