small fix deprecated express-session