Moved session storage to response.end instead of response.on('finish') since that is run AFTER the response is sent to the client, causing race conditions on subsequent requests