add blacklist sessions to deps
use blacklist session instead of express defaults
Add user.settings to blacklist
update express-cookie-black list version
update to use our version of express/connect
add extra keys to the cookie blacklist
Merge pull request #1376 from jsbin/feature/cookie-blacklist

Feature/cookie blacklist