test(session): update session and middleware/session