NG auth: use database session keys, RT#21563