update express-session dependency