session security for feed route
secure feeds/new