add route to fetch current user session