#2 User Schema & Session & middle ware