remove duplicate assignment of user session from api route