switch to redis for sessions, pass user to more routes