Added login flow using session cookie (with passport.js), and respective tests