renamed session key and added comments
changed middleware to store ouath is a session per request
changed call to use session oauth