fix incorrect session handling in Express3 and socket.io