Various

- remove session for now
- refactor config
- mock auth
- refactor routes include list