middleware.session + unit-tests