finish session reject middleware