Default implementation of session based auth | Lalapolalaa Newb