Add session cookie middleware