Move session stuff to middleware

[dirkschut]

This is proving difficult. For some reaason I can't access the session stuff in the middleware...