simplify session data
implemented form authentication + fixes on router with more than 1 middleware in the path