adding basic session, authentication