s4:auth Change auth_generate_session_info to take flags