properly working session using express-session-store