allow setting fixed auth on router app sessions