using node client session instead of express