remove buggy express session <=1.5.x and install express session ~1.6.1 to make response work