Use http-foundation for session handling