use connect-flash middleware must be set cookie
in session and app configure