feed.js - use req.session.uid