Added @simong to package.json contributors.
Use session: false in the Express example

When not using persistent session in the example we can drop the dummy
serialization function.
Fix a test, add query string test

Verification of the assertions was missing in one test. Added a test
that sends the credentials in query string.