Merge: lib/popcorn: introduce AuthHandler to check user session