small fixes to reach user authentication
table "auth_session": added unique index on (user_id, method)
basic user authentication flow
basic authorize flow