finish sessions, login and logout, authorization flow