Exercise 6 - added basic session and authentication