integrate session, accesslog and basic authentication middleware
bugfix for retrieving path param with query param