add session handler to every request