auth: Reorder arguments to generate_session_info