add user and sessions to routes