defp authenticate_request(conn, _params) do
  conn = fetch_cookies(conn, [:session_id])
  request_cookie = conn.cookies["session_id"]
  session_id = get_session(conn, :id)

  if conn.assigns[:user] && request_cookie == session_id do
    conn
  else
    conn
    |> put_status(:unauthorized)
    |> put_view(RebayApiWeb.ErrorView)
    |> render("401.json")
    |> halt()
  end
end