[4.2] Auth : let session get default value