Sessions & auth

Task-first recipes for sessions & auth.