adding express-session, login persistence for req.user