add session in express config