debug session and auth