Add defaults to express-session

This removes the following deprecations messages:

```
express-session deprecated undefined resave option; provide resave option main.js:43:9
express-session deprecated undefined saveUninitialized option; provide saveUninitialized option main.js:43:9
```