remove expired sessions on cron too. Eventually expired sessions
handled by connect-mongo, but we had expiry default to 1yr - ridic.
Set to 2 weeks instead. Also, delete staged users after 3 days instead
of 7