Session finally seem to be working. Login handler redirects to task/get/all.
Sessions expire, etc.
Added some middleware for checking auth status.
Added this requirement to a route for testing.