add session_id base auth