handling callback for login
express cookieSession