Added session for handling user authorization