Add session middleware
Move collections to public instead of /me
Add auth checking