add non persistent sessions
connect session store
add auth routes