Add cookie-parser and express-session middleware