Use session
Start work on getting auth to work