downgrade client-sessions to escape mozilla/node-client-sessions#36