#9 - session loading on all other routes (excluding login and signup).