make /session route dynamic, working in ghostest