added session.js
updated session.ejs