Addedd session and security integration code.
Switched session scope to Singleton as it is being initialized on every
request anyways.