initialize user
intercept route and async check if session