making session and store easier to override
using cookie session by default, allowing mongo also