added session service to better handle auth routes