added app.all routes for session id