Fixed password  middleware relying on req.session
Merge pull request #12 from elliottwilliams/ID-42

ID-42 (3): Fixed password middleware relying on req.session