auth middleware function
mongo-connect sessionstore