Fixed your issue, but..

The session object isn't bound to the request object, so you're route fails. Maybe you know what to do