added a sessions manager for authorization