Use new session service provider.
Pass session into middleware, not the database connection.