Fixed another edge case of security with the manager and changed the name of a method from authenticate (which this never did) to buildSession (which it actually does).