remove password from user session
impl redis sessions
add socket.io, impl chat