varsession dependency + full express 4 compatibility

- varsession dependency
- add of dest option
- remove of express.session deprecated package and full express 4
compatibility