fixed #3 `req.session` missing
Release 0.2.1