I agree with @iancanderson that deleting bad session is internal business of redis-session-store, and I actually think that this should be a built in behavior with no way to disable it. Why would anybody want to disable it, really? That also takes care of passing that 'self' parameter in callback.