Working on auth.getSession, not accepting session key