exceptions: add Unauthorized & MultipleSession