Since you use "POST" to send request, the info will be in "req.body", no need to check req.session. BTW, just simple title search, use "GET" is enough, "POST" is okay if you like