* Expose NewSessionContext function
When auth middleware or interceptor is being mocked by other service
then they can take help of `session.NewSessionContext` to store mocked
session data to request context.
* Initialize _log in auth at creating
* Allow excluding URLs in Auth middleware