auth handler unit test, add options in handler to enable/disable session