changed user-session management to use cookies as store instead of mongoDB due to problems with the mongo-session driver