Middleware for session management