add link about auth and session