introduce SessionMiddleWare to control session handling via an annotation