tinkering aroudn with express session