add middleware, which will load session per action