create account, login, connect to mailbox, view message, logout now works
move userSession object into express session so it gets invalidated correctly