I have a auth middleware that checks for sessions cookies. This will check if a session is valid, and if so query the appropriate user based on the session token. The issue