Support for upcoming express 4.x

The session middleware will no longer be a part of express itself.
This is a breaking change.