include user agent in requests
fix auto-login/session
more tests