Removed default sessionAuth policy