clear session after request
add authrest
add anonymous,authenticated decorators