Switch from connect session middleware to using express-session directly

With connect 3 and express 4, they were nice enough to finally split out the middleware. I removed the dependency on connect and switched to using express-session directly. This should make the dependency tree a little cleaner.