add part of authorization, session repository