cookie-and-session middleware for handover, connect/express