apply SOP
add gitignore
use redis session store
add dsn
function redis
move code into callback
rename config entry : host -> domain
use NODE_ENV
extract app setting