Workflow with nested sessions

Working global authentication/authorization process

Starting here I'm going to tidy up a bit