OptionalAuthMiddleware validates session if present but doesn't require it
()
source not stored for this graph (policy: none)
nothing calls this directly
no test coverage detected