each middleware request is put into queue to serialize access to session object

to avoid race condition