session is now in Mongo