create session object that contains authToken, fix site remove reference to Goodcity and content-security-policy plugin