Removed connect-mongo and instead using cookieSession
Removed connect-mongo and instead using cookieSession. Also, going to see if we can do CSRF protection via JSON