Auth

Changes to POST /api/session

post/api/session