sessions
routing working, authentication not working