fixed depreciated commands for express-session in app.js