Add `authorized` property to sessions

To make it easier to determine if they are already authorized or not