comment out session authentication middleware