ADD: auth route for handling mm3 post and basic session items