Save sessions explicitly before redirect

Sometimes it seems that after acceptToken makes the redirect session
data is not persisted correctly. We might have hit expressjs/session#69

Persisting the session explicitely before redirect solved this at least
for me.