Move creation of session in its own middleware