Creating session objects on authenticate