Isolate session middleware to site routes.