added session support in app.js