Argh why doesn't Express see the cookie session?