begin handling sessions in node.js