express cookieParser and session prior to using passport session