adding session and oauth