first specs showing basic middleware use and creat user session from object