remove session middleware