A orm-agnostic extension to add session based user authorization