Authenticating session & permissions...