fit(sessionAuth): undefined dec