added ability for auth api to be queried for session auth