added autoloaders, session model, authorization