First successful session-based authorization