@User How should one type check the session middleware, the req object doesn't have session type in it