Update sessions and pass along user in middleware