globalpassword rename session member
allow custom session middleware
0.4.1