Add combined session and sandbox middleware