Cleaned up session authorization implementation