getting auth credentials f from the session