temporary fix for issue ID-12

As the title suggests, this is a termporary and compromised fix.

We can't change the order of app.use. Because there are a lot modules, and it may affect other modules.

So instead I create a exception list to filter the routes.

However that would affect other middlewares as well, because some middlware that are `app.use`d globally,
and they used `req.session`, or depends on `req.session`, such as using `req.flash()`;

This will be temporary fix, as later the whole architecture will be rebuilt.