switch session store to mongoStore, fixed login issues, removed messages controller