Removing session tracking with middleware that requires a token and email each request.