Sessions are now being stored in MongoDB, and they are also being cleanup when they expire by an NPM called mongo-store, very useful, also added front end support for 401s