Session wrapper

*session* now contains the session in all routes