fixed up middleware for new auth_session_engine config value