add an html link to the server-config file explaining how to turn off passport sessions