fix express-session warning by passing cookie secret into it. We now pas...

...s the cookie session into express-session as well as cookie-parser modules