[modify] session middleware

session middleware