overriding res.session.save