A small app to teach a friend about session based simple auth in express