Use defaults when using session req/res separately

Should the options be unwraped from the `session-options` in the `wrap-session` function since it is not DRY?