Changes: Copy user to session
Changes: add auth