Update README.md

Without `resave` and `saveUninitialized`, you'll get:

```
express-session deprecated undefined resave option; provide resave option app.js:36:9
express-session deprecated undefined saveUninitialized option; provide saveUninitialized option app.js:36:9
```

So I updated the docs to mention that they are mandatory.