enable gzip and add session middleware
hackage wai-session is old so use old vault