finish auth/session work
pagination, message structure