server side implemented in nodejs with socket.io - session auth for express but not yet socket.io