Fix session middleware usage in uploads
Fix session middleware usage in uploads

`app.session` is no longer the session middleware as of 23e6a97

Closes: #1435

pump-io/pump.io,pump-io/pump.io,e14n/pump.io,e14n/pump.io,pump-io/pump.io,e14n/pump.io