fixed new_session route bug
authentication comments added for workflow