Switched messages from res.locals to req.session