support express v4

Is it in your mind to make it compatible with express v4? (if not, no problem)

- replaced express.session with the external module express-session