fixes #22, using express-session instead of express
Merge pull request #23 from weisjohn/feature_express4

fixes #22, using express-session instead of express