ui - js/css need to be at root
ui - add req.session as session in middleware