Session user handling moved to before_request; rudimentary handling of debate slugs