Set session maxAge to 1 year (fixes problem with latest session-mongoose)
Bump versions of mongoose and session-mongoose