fix auth error
clean views
update express session config