added auth_message, add_session in server