changed auth; fixed session handling for active or selected user and colony id; fixed some unittests