fix(package.json): Add express-session to package.json