sessionauthenticationmiddleware has appeared in 1.7.x