lil refactor. Now sessions lings for two years, user loads from base only for routes