Add SessionFilter to reject requests with expired/unexistent sessions