app_back `connect`: have `session` after `static`, prevent needless work