Revamped auth and sessions