Moved session stuff around yet again. Session now only started for actual routes.