Couple of tweaks around sessions for Express 4

I just pass in the raw session instead of passing in the connect object to reference the session since Express 4 changed that stuff up.

I also made sure the session prefix doesn't prepend "undefined".